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DETAILED ACTION 



1 . Applicant's election of Group III f iled on 6/3/2005 with respect to restriction 
requirement mailed on 5/4/2005 from the following three groups is acknowledged and 
accordingly, this Office Action only addresses the claimed inventions of Group III as 
elected by Applicant. 

This application contains claims directed to the following patentably distinct 
claimed inventions. Restriction to one of the following invention is required under 35 
U.S.C 121: 

I. Claims 1 - 28 drawn to particular key generator, classified in class 380, 
subclass 44. 

II. Claims 29 - 32 and 37 - 41 drawn to specific data processing protection 
using cryptography, classified in class 713, subclass 189. 

III. Claims 33 - 36 drawn to key management with respect to key distributed 
between two different parties without the distribution center, classified in 
class 380, subclass 283. 
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Claim Rejections - 35 USC § 112 

The following is a quotation of the first paragraph of 35 U.S.C. 112: 

The specification shall contain a written description of the invention, and of the manner and process of making and 
using it, in such full, clear, concise, and exact terms as to enable any person skilled in the art to which it pertains, or 
with which it is most nearly connected, to make and use the same and shall set forth the best mode contemplated by 
the inventor of carrying out his invention. 

2. Claim 33 and 35 are rejected under 35 U.S.C. 112, first paragraph, as failing to 
comply with the enablement requirement. The claim(s) contains subject matter which 
was not described in the specification in such a way as to enable one skilled in the art to 
which it pertains, or with which it is most nearly connected, to make and/or use the 
invention. 

This is because the claim limitation "generating, by the first party, a first 
asymmetric key pair based on the base, prime, and sub-prime parameters, and a 
shared key based on the second public key" is not clearly and specifically addressed in 
the specification. One skilled in the art clearly would not know how to use the claimed 
invention to make and use the same of the claimed invention. 

Any other claims not addressed are rejected by virtue of their dependency should 
also be corrected. 

Claim Rejections - 35 USC §112 

The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly, 
claiming the subject matter which the applicant regards as his invention. 
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3. Claim 33 and 35 are rejected under 35 U.S.C. 112, second paragraph, as being 
indefinite for failing to particularly point out and distinctly claim the subject matter which 
applicant regards as the invention. 

Claim 33 and 35 are indefinite because the claim language "net label" is not 
specifically defined in the specification and is therefore not clear what "net label" the 
Applicant is exactly referred to as well as its exact usage. 

Any other claims not addressed are rejected by virtue of their dependency should 
also be corrected. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

A person shall be entitled to a patent unless - 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

4. Claim 33 - 36 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Chen (Patent Number: 5796833), in view of Elgamal (Patent Number: 5657390). 

As per claim 33 and 35, Chen teaches a method of establishing a secure 
communication channel, comprising: 
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sending, by a first party, a secure call notification to a second party (Chen: 
Column 1 1 Line 40: session key protocol requires a connection (or call) request 
between two parties); 

accessing, by the first and second parties, base, "prime, and sub-prime 
parameters (Chen: Column 10 Line 41 - 47: the two prime numbers p and q are 
interpreted as prime and sub-prime to meet the claim language); 

generating, by the second party, a second asymmetric key pair comprising a 
second public key and a second private key, based on the base, prime, and sub-prime 
parameters (Chen: Column 10 Line 41 - 47: the two prime numbers p and q are 
interpreted as prime and sub-prime to meet the claim language); 

sending, by the second party to the first party, the second public key (Chen: 
Column 7 Line 59 - 60 and Column 1 1 Line 4 - 6); 

generating, by the first party, a net label, a private label, a random value, a first 
asymmetric key pair comprising a first public key and a first private key based on the 
base, prime, and sub-prime parameters, and a shared key based on the second public 
key (Chen: Column 1 1 Line 20 - 25, Column 2 Line 59 - 60 and Column 7 Line 59 - 60: 
the common key is qualified as the shared key); However, Chen does not disclose 
expressly a generating net label, a private label, and a random value. 

Elgamal teaches generating net label, a private label, and a random value 
(Elgamal: Column 7 Line 16 - 19: the challenge data is interpreted as a random value 
and associated set of data such as net label / private label, etc.). 
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It would have been obvious to a person of ordinary skill in the art at the time the 
invention was made to combine the teaching of Elgamal within the system of Chen 
because (a) Chen discloses the needs of session key establishment protocol (Chen: 
Column 1 1 Line 40 & Figure 2) and (b) Elgamal teaches a more efficient handshake 
protocol associated with session key generation scheme (Elgamal: Column 2 Line 3 - 
4). 

encrypting, by the first party, the net label, the private label, and the random 
value, using the shared key (Elgamal: Figure 6: the challenge data is encrypted by 
server write key and besides the server write key and client write key is assume to be 
the same as the shared key as taught by Chen); 

sending, by the first party to the second party, the encrypted net label, the 
encrypted private label, the encrypted random value, and the first public key (Elgamal: 
Figure 6); 

generating, by the second party, the shared key based on the first public key 
Chen: Column 7 Line 59 - 60); 

decrypting, by the second party, the encrypted net label, the encrypted private 
label, and the encrypted random value using the shared key (Elgamal: Figure 6); and 

exchanging, by the first and second parties, respective identification numbers to 
establish the secure communication channel (Elgamal: Figure 6: This is the SSL 
(Security Session Layer) communication channel as taught by Elgamal). 
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As per claim 34, Chen as modified further teaches the secure call notification is a 
first secure call notification, the .net label is a first net label, the private label is a first 
private label, the random value is a first random value, the shared key is a first shared 
key, the encrypted net label is a first encrypted first net label, the encrypted private label 
is a first encrypted first private label, and the encrypted random value is a first encrypted 
first random value further, the method further comprising: 

designating, by one of the first party and the second party, either of the first party 
and the second party as a sender, and the other of the first party and the second party 
as a non-sender; suspending, by the sender, the secure communication channel 
between the first party and the second party; establishing, by the sender, a 
communication channel with a third party; sending, by the sender, a second secure call 
notification to the third party; accessing, by the third party, the base, prime, and 
sub-prime parameters; generating, by the third party, a third asymmetric key pair 
comprising a third private key and a third public key, based on the base, prime, and 
sub-prime parameters; sending, by the third party to the sender, the third public key; 
generating, by the sender, a second private label, a second net label, a second random 
value, a fourth asymmetric key pair comprising a fourth public key and a fourth private 
key based on the base, prime, and sub-prime parameters, arid a second shared key 
based on the third public key; encrypting, by the sender, the second private label, the 
first net label, and the first random value, using the second shared key, to provide an 
encrypted second private label, a second encrypted first net label, and a second 
encrypted first random value; sending, by the sender to the third party, the encrypted 
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second private label, the second encrypted first net label, the second encrypted first 
random value, and the fourth public key; generating, by the third party, the second 
shared key based on the third public key; decrypting, by the third party, the encrypted 
second private label, the second encrypted first net label, and the second encrypted first 
random value, using the second shared key; suspending, by the sender, the secure 
communication channel between the sender and the third party; sending, by the sender 
to the third party and the non-sender, a conference call notification; encrypting, by the 
sender, the second net label and the second random value, using one of the first public 
key and the second public key, to provide a first encrypted second net label and a first 
encrypted second random value; generating, by the sender, a first error detection value 
for the first encrypted second net label and the first encrypted second random value; 
sending, by the sender to the non-sender, the first encrypted second net label, the first 
encrypted second random value, and the first error correction value; generating, by the 
non-sender, a second error detection value, for the first encrypted second net label and 
the first encrypted second random value; checking, by the non-sender, the validity of the 
first encrypted second net label and the first encrypted second random value by 
comparing the first and second error detection values; decrypting, by the non-sender, 
the first encrypted second net label and the first encrypted second random value, using 
one of the first private key and the second private key; encrypting, by the sender, the 
second net label and the second random value, using the third public key, to provide a 
second encrypted second net label and a second encrypted second random value; 
generating, by the sender, a third error detection value, for the second encrypted 
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second net label and the second encrypted second random value; sending, by the 
sender to the third party, the second encrypted second net label, the second encrypted 
second random value, and the third error correction value; generating, by the third party, 
a fourth error detection value, for the second encrypted second net label and the 
second encrypted second random value; checking, by the third party, the validity of the 
second encrypted second net label and the second encrypted second random value by 
comparing the third and fourth error detection values; and decrypting, by the third party, 
the second encrypted second net label and the second encrypted second random 
value, using third private key (see the same rationale addressed above in rejecting the 
claim 33 and 35). 

As per claim 36, Chen as modified teaches deriving, by the first party, an error 
checking code for each of the respective other parties from the respective encrypted net 
labels and the respective encrypted random values (Chen: Column 1 Line 65 - 67, 
Column 6 Line 38 - 49, Column 6 Line 59 - 65 and Column 7 Line 1 3 - 26: a hash 
value is considered as an error checking code); 

sending, by the first party, the respective error checking codes to the respective 
other parties (Chen: Column 1 Line 65 - 67, Column 6 Line 38 - 49, Column 6 Line 59 
- 65 and Column 7 Line 1 3 - 26); and 

confirming, by the other parties, validity of the respective encrypted net 
labels and the respective encrypted random values using the respective error checking 
codes (Chen: Column 7 Line 13 - 26). 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Longbit Chai whose telephone number is 571-272-3788. 
The examiner can normally be reached on Monday-Friday 8:00am-4:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on 571-272-3795. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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